<html>
<head><meta charset="utf-8"><title>random · wg-secure-code · Zulip Chat Archive</title></head>
<h2>Stream: <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/index.html">wg-secure-code</a></h2>
<h3>Topic: <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html">random</a></h3>

<hr>

<base href="https://rust-lang.zulipchat.com">

<head><link href="https://rust-lang.github.io/zulip_archive/style.css" rel="stylesheet"></head>

<a name="155132862"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155132862" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Alex Gaynor <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155132862">(Jan 15 2019 at 00:22)</a>:</h4>
<p>Hmm: <a href="https://bugs.chromium.org/p/chromium/issues/detail?id=921795" target="_blank" title="https://bugs.chromium.org/p/chromium/issues/detail?id=921795">https://bugs.chromium.org/p/chromium/issues/detail?id=921795</a> I don't really agree, but it's more evidence of the value of having the straight forward OS CSPRNG in <code>std</code></p>



<a name="155133018"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155133018" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Zach Reizner <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155133018">(Jan 15 2019 at 00:25)</a>:</h4>
<p>It's my intern's starting project. Be nice :)</p>



<a name="155133235"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155133235" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Taylor Cramer <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155133235">(Jan 15 2019 at 00:28)</a>:</h4>
<p><span class="user-mention" data-user-id="132723">@Zach Reizner</span> FYI <code>rand</code> is part of the official rust-lang org</p>



<a name="155133246"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155133246" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Taylor Cramer <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155133246">(Jan 15 2019 at 00:28)</a>:</h4>
<p>and is maintained by a lot of the same people who maintain the stdlib</p>



<a name="155133247"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155133247" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Zach Reizner <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155133247">(Jan 15 2019 at 00:28)</a>:</h4>
<p>Although, perhaps a insightful discussion could be had on that bug. FWIW, I had a similar change for the byteorder crate that we decided not to merge because <span class="user-mention" data-user-id="119235">@David Tolnay</span> convinced me that that crate was under good stewardship. He conspicuously did not say the same about <code>rand</code>.</p>



<a name="155133276"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155133276" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Alex Gaynor <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155133276">(Jan 15 2019 at 00:28)</a>:</h4>
<p>I have some complaints about <code>rand</code> (mostly that it's too complex, and has too much when all I want is a wrapper around the 17 kernel CSPRNG APIs). But I'm not concerned about teh malware perspective.</p>



<a name="155153234"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155153234" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155153234">(Jan 15 2019 at 08:17)</a>:</h4>
<p><code>rand</code> itself is a kitchen sink of 90s crypto and non-cryptographic RNGs</p>



<a name="155153249"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155153249" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155153249">(Jan 15 2019 at 08:17)</a>:</h4>
<p>crypto projects should use <code>rand_os</code></p>



<a name="155153264"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155153264" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155153264">(Jan 15 2019 at 08:18)</a>:</h4>
<p>(which I still can't help but pronounce "randos")</p>



<a name="155153299"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155153299" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155153299">(Jan 15 2019 at 08:18)</a>:</h4>
<p>I'd be a big fan of a <code>getrandom()</code>-like API in <code>std</code> though</p>



<a name="155153301"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155153301" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155153301">(Jan 15 2019 at 08:18)</a>:</h4>
<p>especially if it were backed by a lang item</p>



<a name="155204207"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155204207" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Gerardo Di Giacomo <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155204207">(Jan 15 2019 at 21:05)</a>:</h4>
<p>is rand_os OsRng ?</p>



<a name="155205276"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155205276" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Gerardo Di Giacomo <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155205276">(Jan 15 2019 at 21:18)</a>:</h4>
<p>as in rand::os::OsRng</p>



<a name="155208030"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/random/near/155208030" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Alex Gaynor <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/random.html#155208030">(Jan 15 2019 at 21:57)</a>:</h4>
<p><code>rand_os</code> is the crate where <code>rand::os::OsRng</code> is actually implemented</p>



<hr><p>Last updated: Aug 07 2021 at 22:04 UTC</p>
</html>